Using Coldfusion 11 with IIS 7 - calling a non-existent component method returns Internal Server error 500 instead of a 404 type error. This is a problem because security scanning software calls the 500 error as a medium security risk. Unchecking the "Enable HTTP Status codes" box in the server settings will return the CF specific error which triggers the NullPointerException error. Does anyone else notice this or has dealt with this before?
↧